abuse

Enumeration

sudo nmap -p1433 -sSVC "$ip"

Connect to SQL server

mysql -U julio -pPasssword123 -h "$ip"

sqlcmd -S SRVMSSQL -U julio -P 'password!' -y 30 -Y 20 (windows)

Impacket-mssqlclient (good)

Connect to MSSQL server

sqsh -S "$ip" -U julio -P 'password!' -h

sqsh -S "$ip" -U .\\julio -P 'mypassword!' -h (with domain name)

Impacket tool

Impacket-mssqlclient -p 1433 julio@"$ip"

Connect to mysql server

mysql -h "$ip" -u root -p<pass>

mysql -U root -p<password> -h "$ip"

							OR

mysql -D 'wordpress' -u 'wp_user' -h "$ip" --skip-ssl -p              # skip ssl

							OR

C:\xampp\mysql\bin\mysql.exe -u MrGibbonsDB -p"MisterGibbs!Parrot!?1"

sometime double-quote solve problem in windows

Mysql Commands

Mysql readable file check

msfconsole > search 'auxiliary/scanner/mysql/mysql_file_enum'

Load a system file in mysql

select load_file('/etc/shadow');

Mysql capabilities check

nmap -p 3306 "$ip" -sV --script mysql-info --script-args 'mysqluser=root, mysqlpass=""'

Mysql file privileges check

nmap -p 3306 --script mysql-audit --script-args "mysql-audit.username='root',mysql-audit.password='',mysql-audit.filename='/usr/share/nmap/nselib/data/mysql-cis.audit'" "$ip"

Run mysql commands with nmap

nmap -p 3306 --script mysql-query --script-args 'username=root, password="", query="select count(\*) from books.authors;"' "$ip"

Mysql config

cat /etc/mysql/mysql.conf.d/mysqld.cnf